https://www.junookyo.com/2013/01/cross-site-scripting-filtration-bypass.html